library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-toolset | May 4, 2022 | Aug 7, 2021 |
| Alpine Linux | — | Upgrade rust | Mar 26, 2024 | Aug 7, 2021 |
| Centos_linux | — | Upgrade cargo-docUpgrade rust-srcUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade rls-debuginfoUpgrade rustfmtUpgrade rust-lldbUpgrade rust-docUpgrade clippyUpgrade cargoUpgrade rust-gdbUpgrade rustUpgrade rlsUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rust-toolsetUpgrade cargo-debuginfoUpgrade clippy-debuginfo | Nov 10, 2021 | Aug 7, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Aug 7, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Aug 7, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Aug 7, 2021 |
| Oracle_linux | — | Upgrade rlsUpgrade rustUpgrade rust-std-staticUpgrade clippyUpgrade rust-debugger-commonUpgrade rust-docUpgrade rustfmtUpgrade rust-analysisUpgrade rust-srcUpgrade cargo-docUpgrade cargoUpgrade rust-gdbUpgrade rust-toolsetUpgrade rust-lldbUpgrade rust-std-static-wasm32-unknown-unknown | Nov 17, 2021 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade rust-debugger-commonUpgrade rust-analysisUpgrade rust-lldbUpgrade rustfmt-debuginfoUpgrade rustUpgrade rustfmtUpgrade cargoUpgrade rust-docUpgrade clippyUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade cargo-docUpgrade rust-std-staticUpgrade rust-srcUpgrade rlsUpgrade cargo-debuginfoUpgrade clippy-debuginfoUpgrade rls-debuginfoUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-toolsetUpgrade rust-gdb | Nov 10, 2021 | Aug 7, 2021 |
| Rocky_linux | — | Upgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-debuginfoUpgrade rust-toolsetUpgrade rustfmtUpgrade cargo-debuginfoUpgrade rls-debuginfoUpgrade cargoUpgrade rlsUpgrade rust-docUpgrade rustfmt-debuginfoUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade rustUpgrade rust-debugsourceUpgrade rust-analysisUpgrade clippy | Mar 12, 2024 | Aug 7, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Aug 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub